$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/24ec6956-edcc-36c7-8c93-631582aff06f.roa File: 24ec6956-edcc-36c7-8c93-631582aff06f.roa (raw, json) Hash identifier: JEboSiPB63JP9NiXMX+Nh9VSWUh+kp0/T1Hc2O8EfA4= Subject key identifier: 38:7C:50:07:E8:E4:EF:64:7B:C4:F9:E5:28:4E:8A:52:EE:70:AE:E8 Certificate issuer: /CN=cdc373f2-7aee-4c17-9b33-e9d993543374 Certificate serial: 010D0C9F43285849F2E52EFD7095029CAF9B4F00 Authority key identifier: 4D:A6:67:E7:20:18:14:B4:1D:6F:2D:DD:D9:9C:D6:BA:8A:D7:C3:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/24ec6956-edcc-36c7-8c93-631582aff06f.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 400079 IP address blocks: 204.48.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/cdc373f2-7aee-4c17-9b33-e9d993543374.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/cdc373f2-7aee-4c17-9b33-e9d993543374.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:2e:fd:70:95:02:9c:af:9b:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdc373f2-7aee-4c17-9b33-e9d993543374 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=c5ab7511-7d86-4e78-9015-ff85211f4fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:eb:85:62:f6:48:cd:c7:fe:fc:dc:25:e1:be: 20:c6:72:74:4a:3c:11:5c:0b:08:94:23:83:ac:d7: d9:ca:c1:80:14:0a:df:bd:ab:4c:49:a9:43:90:a9: af:3f:59:67:0f:fb:c5:5d:0d:c5:da:4d:e2:df:be: 90:41:b7:87:2f:7d:d3:5c:be:71:db:99:54:12:7a: 4e:e3:83:d5:b1:65:31:9a:32:e2:5c:34:5d:02:70: bf:b5:66:4b:2c:2a:d9:d5:04:13:c5:0b:ec:d2:15: a1:ed:49:76:d5:11:2d:cb:67:e8:b0:ba:4e:ed:db: bd:7a:69:6a:ce:45:5b:3f:44:38:bf:07:17:88:10: 4f:bd:e4:76:a3:ab:0a:9f:56:3d:86:d0:1b:f1:f8: 33:6a:cb:57:88:cb:85:38:66:0d:26:a2:df:ec:d0: 1f:80:98:c7:35:54:bb:86:0e:97:3a:cf:4d:0e:7f: 0a:7c:26:2e:f6:24:ef:f1:03:7b:e1:80:1e:e9:cb: f8:50:58:30:b6:45:6a:4c:ca:50:ea:cb:3f:07:68: 8e:72:96:70:13:58:11:ac:d5:f7:96:2d:43:8c:ab: 72:b5:67:7c:3c:68:c5:51:fd:b9:32:ba:13:f1:55: fd:20:cf:3b:ef:17:0a:f1:6f:5e:37:22:ed:ea:23: ad:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7C:50:07:E8:E4:EF:64:7B:C4:F9:E5:28:4E:8A:52:EE:70:AE:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/24ec6956-edcc-36c7-8c93-631582aff06f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374/cdc373f2-7aee-4c17-9b33-e9d993543374.crl X509v3 Authority Key Identifier: keyid:4D:A6:67:E7:20:18:14:B4:1D:6F:2D:DD:D9:9C:D6:BA:8A:D7:C3:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cdc373f2-7aee-4c17-9b33-e9d993543374.cer sbgp-ipAddrBlock: critical IPv4: 204.48.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:11:7d:5a:c6:e2:b6:f0:c7:4a:0d:c9:8a:cd:f2:09:d7:a8: 1c:cb:30:1c:2b:ef:9a:7e:c8:0c:de:0d:e1:61:51:73:6a:d5: 7e:85:7f:61:70:04:bd:4f:4b:39:d1:c0:2d:5c:19:4f:51:85: 64:3f:9e:bc:a3:c9:67:2b:08:ee:d4:04:57:64:f0:8a:e5:a2: 8f:0b:bf:60:60:01:b9:21:9c:2e:f6:c7:c6:ca:55:bb:74:2d: ba:9e:cc:db:72:b7:f2:98:0a:ca:66:7f:d1:cb:eb:6d:b8:8d: 7e:27:d1:c2:47:c0:1a:89:f0:da:cb:5c:c5:fc:86:20:cc:31: b8:3e:86:33:60:9e:7e:1b:7a:8e:58:96:d4:84:57:cf:7b:03: 85:53:ef:ed:6d:16:a5:77:f5:fb:da:ad:4a:b1:bd:38:8a:c2: e5:20:e9:c5:4b:ae:af:b3:d0:aa:4c:6a:66:73:89:6d:bf:0d: dc:bf:28:11:c7:80:d1:ae:4d:10:a0:72:b1:0f:13:84:9d:0c: 47:3a:57:be:9d:13:e4:a6:79:df:4f:ca:27:70:6c:f0:8f:c5: 1f:c1:e9:61:62:79:59:46:f7:ef:f8:ab:1d:af:e1:88:1a:b7: b9:bf:9a:6f:3c:21:07:98:10:71:6b:81:da:db:71:c5:8e:54: b8:88:cd:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5S79cJUCnK+bTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RjMzczZjItN2FlZS00YzE3LTliMzMtZTlkOTkzNTQz Mzc0MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk YzVhYjc1MTEtN2Q4Ni00ZTc4LTkwMTUtZmY4NTIxMWY0ZmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteuFYvZIzcf+/Nwl4b4gxnJ0SjwRXAsIlCOD rNfZysGAFArfvatMSalDkKmvP1lnD/vFXQ3F2k3i376QQbeHL33TXL5x25lUEnpO 44PVsWUxmjLiXDRdAnC/tWZLLCrZ1QQTxQvs0hWh7Ul21REty2fosLpO7du9emlq zkVbP0Q4vwcXiBBPveR2o6sKn1Y9htAb8fgzastXiMuFOGYNJqLf7NAfgJjHNVS7 hg6XOs9NDn8KfCYu9iTv8QN74YAe6cv4UFgwtkVqTMpQ6ss/B2iOcpZwE1gRrNX3 li1DjKtytWd8PGjFUf25MroT8VX9IM877xcK8W9eNyLt6iOtKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDh8UAfo5O9ke8T55ShOilLucK7oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZGMz NzNmMi03YWVlLTRjMTctOWIzMy1lOWQ5OTM1NDMzNzQvMjRlYzY5NTYtZWRjYy0z NmM3LThjOTMtNjMxNTgyYWZmMDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2RjMzczZjItN2FlZS00YzE3LTli MzMtZTlkOTkzNTQzMzc0L2NkYzM3M2YyLTdhZWUtNGMxNy05YjMzLWU5ZDk5MzU0 MzM3NC5jcmwwHwYDVR0jBBgwFoAUTaZn5yAYFLQdby3d2ZzWuorXw94wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZGMzNzNmMi03YWVlLTRjMTctOWIzMy1lOWQ5 OTM1NDMzNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDA9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcRfVrG4rbwx0oNyYrN8gnXqBzLMBwr75p+yAzeDeFhUXNq1X6Ff2Fw BL1PSznRwC1cGU9RhWQ/nryjyWcrCO7UBFdk8Irloo8Lv2BgAbkhnC72x8bKVbt0 LbqezNtyt/KYCspmf9HL6224jX4n0cJHwBqJ8NrLXMX8hiDMMbg+hjNgnn4beo5Y ltSEV897A4VT7+1tFqV39fvarUqxvTiKwuUg6cVLrq+z0KpMamZziW2/Ddy/KBHH gNGuTRCgcrEPE4SdDEc6V76dE+Smed9PyidwbPCPxR/B6WFieVlG9+/4qx2v4Yga t7m/mm88IQeYEHFrgdrbccWOVLiIzRg= -----END CERTIFICATE-----Generated at Thu Jul 3 09:54:23 2025 by rpki-client